@sanvika/auth 2.8.0 → 2.9.1

package/dist/index.js

@@ -17,10 +17,9 @@ var STORAGE_KEYS = {
 };
 var DEFAULT_AVATAR_SVG = `data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 40 40'%3E%3Ccircle cx='20' cy='20' r='20' fill='%23e5e7eb'/%3E%3Ccircle cx='20' cy='15' r='7' fill='%23adb5bd'/%3E%3Cellipse cx='20' cy='35' rx='12' ry='8' fill='%23adb5bd'/%3E%3C/svg%3E`;
 
-// SanvikaAuthProvider.jsx
-import { jsx } from "react/jsx-runtime";
-var S_AUTH_URL = "https://auth.sanvikaproduction.com";
-var SanvikaAuthContext = createContext(null);
+// authFlow.js
+var DEFAULT_AUTH_URL = "https://auth.sanvikaproduction.com";
+var DEVICE_ID_STORAGE_KEY = "sanvika_deviceId";
 function randomDeviceId() {
   try {
     if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
@@ -30,6 +29,121 @@ function randomDeviceId() {
   }
   return `device-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
 }
+function getOrCreateWebDeviceId() {
+  var _a, _b;
+  if (typeof window === "undefined") return randomDeviceId();
+  let deviceId = localStorage.getItem(DEVICE_ID_STORAGE_KEY);
+  if (!deviceId) {
+    const raw = `${navigator.userAgent}|${((_a = window.screen) == null ? void 0 : _a.width) ?? 0}x${((_b = window.screen) == null ? void 0 : _b.height) ?? 0}|${navigator.language}`;
+    let hash = 0;
+    for (let i = 0; i < raw.length; i++) {
+      hash = Math.imul(31, hash) + raw.charCodeAt(i) | 0;
+    }
+    deviceId = `d_${Math.abs(hash).toString(36)}_${Date.now().toString(36)}`;
+    localStorage.setItem(DEVICE_ID_STORAGE_KEY, deviceId);
+  }
+  return deviceId;
+}
+async function checkMobile({
+  authBaseUrl = DEFAULT_AUTH_URL,
+  mobile,
+  deviceId,
+  clientId,
+  callbackUrl
+}) {
+  const res = await fetch(`${authBaseUrl}/api/auth/check-mobile`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      mobile: String(mobile).trim(),
+      deviceId,
+      clientId,
+      ...callbackUrl ? { callbackUrl } : {}
+    })
+  });
+  const data = await res.json();
+  if (!data.success) {
+    const err = new Error(data.message || data.error || "Check mobile failed");
+    err.code = data.error;
+    throw err;
+  }
+  return data;
+}
+async function postLogin({
+  authBaseUrl = DEFAULT_AUTH_URL,
+  mobile,
+  password,
+  deviceId,
+  userAgent,
+  clientId,
+  deviceName
+}) {
+  const body = {
+    mobile: String(mobile).trim(),
+    deviceId,
+    clientId,
+    userAgent: userAgent || deviceName || "Sanvika App"
+  };
+  if (password) {
+    body.password = password;
+  }
+  const res = await fetch(`${authBaseUrl}/api/auth/login`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  const data = await res.json();
+  if (!data.success) {
+    const err = new Error(data.error || data.message || "Login failed");
+    err.code = data.error;
+    throw err;
+  }
+  return data;
+}
+async function deviceAwareLogin({
+  authBaseUrl = DEFAULT_AUTH_URL,
+  mobile,
+  password,
+  deviceId,
+  userAgent,
+  deviceName,
+  clientId,
+  callbackUrl,
+  resolveDeviceId
+}) {
+  const resolvedDeviceId = deviceId || (typeof resolveDeviceId === "function" ? await resolveDeviceId() : getOrCreateWebDeviceId());
+  const check = await checkMobile({
+    authBaseUrl,
+    mobile,
+    deviceId: resolvedDeviceId,
+    clientId,
+    callbackUrl
+  });
+  if (!check.exists) {
+    const err = new Error("Mobile number not registered.");
+    err.code = "USER_NOT_REGISTERED";
+    throw err;
+  }
+  if (!check.isKnownDevice && !password) {
+    const err = new Error("Password is required for this device.");
+    err.code = "MISSING_PASSWORD";
+    err.requiresPassword = true;
+    throw err;
+  }
+  return postLogin({
+    authBaseUrl,
+    mobile,
+    password: check.isKnownDevice ? void 0 : password,
+    deviceId: resolvedDeviceId,
+    userAgent,
+    deviceName,
+    clientId
+  });
+}
+
+// SanvikaAuthProvider.jsx
+import { jsx } from "react/jsx-runtime";
+var SanvikaAuthContext = createContext(null);
 function createDefaultWebPersistence() {
   return {
     getItem: async (key) => typeof localStorage !== "undefined" ? localStorage.getItem(key) : null,
@@ -49,9 +163,13 @@ function SanvikaAuthProvider({
   children,
   clientId,
   redirectUri,
+  /** RN embedded LoginScreen: skip callbackUrl on check-mobile/login APIs (OAuth URI still used for /authorize links). */
+  embeddedLogin = false,
   dashboardPath,
+  authBaseUrl = DEFAULT_AUTH_URL,
   persistence: persistenceProp
 }) {
+  const apiCallbackUrl = embeddedLogin ? void 0 : redirectUri;
   const persistence = useMemo(() => {
     return persistenceProp || createDefaultWebPersistence();
   }, [persistenceProp]);
@@ -83,25 +201,62 @@ function SanvikaAuthProvider({
       cancelled = true;
     };
   }, [persistence]);
-  const login = async ({ mobile, password, deviceId, deviceName }) => {
-    const response = await fetch(`${S_AUTH_URL}/api/auth/login`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
+  const persistSession = useCallback(
+    async (token, userData) => {
+      await persistence.setItem(STORAGE_KEYS.ACCESS_TOKEN, token);
+      await persistence.setItem(STORAGE_KEYS.USER, JSON.stringify(userData));
+      setToken(token);
+      setUser(userData);
+    },
+    [persistence]
+  );
+  const checkMobile2 = useCallback(
+    async ({ mobile, deviceId }) => {
+      const resolvedDeviceId = deviceId || getOrCreateWebDeviceId();
+      return checkMobile({
+        authBaseUrl,
+        mobile,
+        deviceId: resolvedDeviceId,
+        clientId,
+        callbackUrl: apiCallbackUrl
+      });
+    },
+    [authBaseUrl, clientId, apiCallbackUrl]
+  );
+  const login = async ({
+    mobile,
+    password,
+    deviceId,
+    deviceName,
+    userAgent,
+    skipDeviceCheck = false
+  }) => {
+    const resolveDeviceId = async () => deviceId || getOrCreateWebDeviceId();
+    let data;
+    if (skipDeviceCheck) {
+      data = await postLogin({
+        authBaseUrl,
         mobile,
         password,
         deviceId: deviceId || randomDeviceId(),
-        deviceName: deviceName || "Browser"
-      })
-    });
-    const data = await response.json();
-    if (!data.success) {
-      throw new Error(data.error || data.message || "Login failed");
+        userAgent: userAgent || deviceName,
+        clientId,
+        deviceName
+      });
+    } else {
+      data = await deviceAwareLogin({
+        authBaseUrl,
+        mobile,
+        password,
+        deviceId,
+        userAgent: userAgent || (typeof navigator !== "undefined" ? navigator.userAgent : void 0),
+        deviceName,
+        clientId,
+        callbackUrl: apiCallbackUrl,
+        resolveDeviceId
+      });
     }
-    await persistence.setItem(STORAGE_KEYS.ACCESS_TOKEN, data.accessToken);
-    await persistence.setItem(STORAGE_KEYS.USER, JSON.stringify(data.user));
-    setToken(data.accessToken);
-    setUser(data.user);
+    await persistSession(data.accessToken, data.user);
     return data;
   };
   const setAuth = useCallback(
@@ -115,7 +270,7 @@ function SanvikaAuthProvider({
   );
   const logout = async () => {
     try {
-      await fetch(`${S_AUTH_URL}/api/auth/logout`, {
+      await fetch(`${authBaseUrl}/api/auth/logout`, {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
@@ -153,12 +308,14 @@ function SanvikaAuthProvider({
     isAuthenticated: !!user,
     isLoggedIn: !!user,
     login,
+    checkMobile: checkMobile2,
     logout,
     setAuth,
     authFetch,
     clientId,
     redirectUri,
-    dashboardPath
+    dashboardPath,
+    authBaseUrl
   };
   return /* @__PURE__ */ jsx(SanvikaAuthContext.Provider, { value, children });
 }
@@ -196,7 +353,7 @@ styleInject("@keyframes snvk-shimmer {\n  0% {\n    background-position: 200% 0;
 
 // SanvikaAccountButton.jsx
 import { jsx as jsx2, jsxs } from "react/jsx-runtime";
-var S_AUTH_URL2 = "https://auth.sanvikaproduction.com";
+var S_AUTH_URL = "https://auth.sanvikaproduction.com";
 var SanvikaAccountButtonErrorBoundary = class extends Component {
   constructor(props) {
     super(props);
@@ -329,7 +486,7 @@ function SanvikaAccountButtonContent({
   if (!isAuthenticated || loading) {
     const { clientId } = auth;
     const redirectUri = auth.redirectUri || (typeof window !== "undefined" && window.location ? window.location.origin + "/auth/callback" : "");
-    const authorizeUrl = clientId && redirectUri ? `${S_AUTH_URL2}/authorize?client_id=${encodeURIComponent(clientId)}&redirect_uri=${encodeURIComponent(redirectUri)}` : `${S_AUTH_URL2}/authorize`;
+    const authorizeUrl = clientId && redirectUri ? `${S_AUTH_URL}/authorize?client_id=${encodeURIComponent(clientId)}&redirect_uri=${encodeURIComponent(redirectUri)}` : `${S_AUTH_URL}/authorize`;
     return /* @__PURE__ */ jsxs(
       "button",
       {
@@ -497,7 +654,7 @@ function friendlyError(code) {
     case "INVALID_PASSWORD":
       return "Incorrect password.";
     case "RATE_LIMIT_EXCEEDED":
-      return "Too many attempts. Please try again in 15 minutes.";
+      return "Too many attempts. Please wait and try again.";
     case "SERVER_ERROR":
       return "Auth service error. Please try again.";
     default:
@@ -687,11 +844,18 @@ function SanvikaAdminLogin({
   ] }) });
 }
 export {
+  DEFAULT_AUTH_URL,
   DEFAULT_AVATAR_SVG,
+  DEVICE_ID_STORAGE_KEY,
   STORAGE_KEYS,
   SanvikaAccountButton,
   SanvikaAdminLogin,
   SanvikaAuthContext,
   SanvikaAuthProvider,
+  checkMobile,
+  deviceAwareLogin,
+  getOrCreateWebDeviceId,
+  postLogin,
+  randomDeviceId,
   useSanvikaAuth
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanvika/auth",
-  "version": "2.8.0",
+  "version": "2.9.1",
   "description": "Sanvika Auth SDK — React components/hooks + server-side token verification and user proxy",
   "type": "module",
   "main": "dist/index.js",
@@ -12,6 +12,10 @@
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "tsup",
+    "prepublishOnly": "npm run build"
+  },
   "publishConfig": {
     "access": "public"
   },
@@ -35,8 +39,5 @@
     "nextjs"
   ],
   "author": "sanvika",
-  "license": "MIT",
-  "scripts": {
-    "build": "tsup"
-  }
-}
+  "license": "MIT"
+}